Privacy Policy

Last updated: 8 May 2026

This policy explains what personal data UBQ Limited ("we", "us") collects when you use Pontus.fm, why we collect it, and what your rights are. We're the "data controller" for your information under UK and EU data protection law.

We've kept this as plain as possible. If you have questions, email support@pontus.fm.

1. What we collect

When you sign in with Google, we receive your name, email address, and profile picture from Google. That's it — we don't ask Google for anything else, like your contacts, calendar, or files.

When you use Pontus.fm, we store:

• The polls, questions, and answer options you create
• Responses submitted to your polls
• In future, if you choose to connect a podcast to your account, we'll store information about that podcast (such as its name, feed URL, and related details you provide)
• Basic usage data — things like when you logged in, which features you used, and any errors that came up

When you buy credits, our payment provider (Stripe) handles the transaction. We receive confirmation that you paid, the amount, and a reference, but we don't see or store your card details.

Cookies and similar tech. We use a small number of cookies to keep you logged in and to understand how the Service is used. You can control cookies through your browser.

2. Why we use it, and our legal basis

| What we do | Why | Legal basis (UK/EU GDPR) | |---|---|---| | Run your account and the Service | So you can actually use Pontus.fm | Performance of our contract with you | | Process payments | So you can buy credits | Performance of our contract with you | | Keep the Service secure and prevent abuse | To protect users and our business | Our legitimate interests | | Improve the Service | To make it work better | Our legitimate interests | | Send service emails (e.g. receipts, important changes) | To keep you informed | Performance of our contract | | Send marketing emails (only if you opt in) | To tell you about new features | Your consent | | Comply with legal obligations | We have to | Legal obligation |

3. Google user data — specific disclosure

Pontus.fm's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

We use the basic profile information from Google (your name, email, and profile picture) only to create and run your account. We don't sell this data, we don't share it with third parties for advertising, and we don't use it for anything other than running Pontus.fm for you.

4. Who we share it with

We don't sell your personal data. We share it only with:

• Service providers that help us run Pontus.fm — for example, our hosting provider, our payment provider (Stripe), our email provider, and analytics tools. They only get what they need to do their job, and they're contractually required to protect it.
• Authorities or other parties if we're legally required to (e.g. court order), or to protect our rights or someone's safety.
• A buyer if our business is sold or merged. We'd let you know if this happens.

5. Where your data is stored

We're based in the UK, but our service providers may store or process data in other countries, including the United States. When data leaves the UK or EU, we make sure it's protected by appropriate legal safeguards (such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses).

6. How long we keep it

• Account data: for as long as your account exists, plus a short period after.
• Polls and responses: while your account is active. If you delete a poll, we remove it from active systems, though backups may take a bit longer to clear.
• Payment records: at least 6 years, because UK tax law requires it.
• Closed accounts: within 30 days of closure, except where we need to keep something for legal reasons.

7. Your rights

Wherever you live, you can email support@pontus.fm to:

• Get a copy of the personal data we hold about you
• Correct anything that's wrong
• Delete your data (subject to legal exceptions, like keeping payment records)
• Export your data in a portable format
• Object to or restrict certain uses
• Withdraw consent for anything you previously consented to

If you're in the UK or EU: you have these rights under UK GDPR and EU GDPR. If you think we've handled your data badly, you can complain to the UK Information Commissioner's Office or your local EU data protection authority.

If you're in California: you have similar rights under the CCPA, including the right to know what we collect, to delete it, and not to be discriminated against for using your rights. We don't sell personal data.

We aim to respond within 30 days.

8. Security

We use sensible technical and organisational measures to protect your data — encryption in transit, access controls, and regular reviews. No system is perfectly secure, though, so we can't guarantee absolute safety.

9. Children

Pontus.fm isn't intended for under-16s, and we don't knowingly collect data from them. If you think a child has given us personal data, email us and we'll delete it.

10. Changes to this policy

If we make significant changes, we'll let you know by email or through the Service. The "Last updated" date at the top tells you when this policy last changed.

11. Contact

UBQ Limited Email: support@pontus.fm